CVE-2018-12187

published 2019-03-14

CVE-2018-12187: Insufficient input validation in Intel(R) Active Management Technology (Intel(R) AMT) before version 11.8.60, 11.11.60, 11.22.60 or 12.0.20 may allow an…

high 7.5 CVSS 3.0

AV N AC L PR N UI N S U C N I N A H

Insufficient input validation in Intel(R) Active Management Technology (Intel(R) AMT) before version 11.8.60, 11.11.60, 11.22.60 or 12.0.20 may allow an unauthenticated user to potentially cause a denial of service via network access.

Affected

4 ranges

Vendor	Product	Version range	Fixed in
intel	active_management_technology_firmware	>= 11.0 < 11.8.60	11.8.60
intel	active_management_technology_firmware	>= 11.10 < 11.11.60	11.11.60
intel	active_management_technology_firmware	>= 11.20 < 11.22.60	11.22.60
intel	active_management_technology_firmware	>= 12.0.0 < 12.0.20	12.0.20

CWE-20